{
  lanzaboote = {
    enable = true;
    configurationLimit = 5;
    pkiBundle = "/etc/secureboot";
  };
  initrd = {
    verbose = false;
    systemd.enable = true;
    kernelModules = [ "lz4" ];
  };
  plymouth.enable = true;
  loader.efi.canTouchEfiVariables = true;
  kernelPackages = pkgs.linuxPackages_latest;
  consoleLogLevel = 3;
  kernelParams = [
    "quiet"
    "udev.log_level=3"
    "zswap.enabled=1"
    "zswap.compressor=lz4"
    "mitigations=off"
  ];
  kernelModules = [
    "hid-playstation"
    "tcp_bbr"
    "ntsync"
  ];
  kernel.sysctl = {
    "net.ipv4.tcp_fastopen" = 3;
    "net.ipv4.tcp_congestion_control" = "bbr";
    "net.core.default_qdisc" = "fq";

    "kernel.sched_cfs_bandwidth_slice_us" = 3000;
    "net.ipv4.tcp_fin_timeout" = 5;
    "kernel.split_lock_mitigate" = 0;
    "vm.max_map_count" = 2147483642;
  };
}
